Sub-Processors Used by DrugBank | DrugBank Trust Center

Please see the below list of sub-processors that DrugBank has engaged with, the country they operate from, and the service(s) they provide.

Sub-Processor	Applicable Services	Nature and Purpose of Processing	Categories of Personal Information	Processing Location(s)	Security Overview
Airbrake Technologies, Inc.	All DrugBank Products	Application monitoring and error reporting	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Security Overview
Amazon Web Services, Inc.	All DrugBank Products	File storage and backups (Amazon Simple Storage Service)	Encrypted Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Amazon AWS Compliance Program
Atlassian, Inc.	All DrugBank Products	Customer service and support	Personal Information contained in user account information and user-submitted data through support requests and emails	USA	Atlassian Security Measures
Cloudflare, Ltd.	All DrugBank Products	Content delivery network (CDN) provider	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	Customer traffic is processed globally at the data center closest to the end user.	Certifications and Compliance Resources
Datadog, Inc.	All DrugBank Products	Application and infrastructure monitoring	Personal Information contained in application logged requests	USA	Datadog Security & Compliance
Dovetail, Inc.	All DrugBank Products	Customer service and support	Personal Information contained in text or files created by customer	USA	Dovetail Security
GitHub, Inc.	All DrugBank Products	Database backups and data processing	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	GitHub Security
Google, Inc.	All DrugBank Products	Cloud hosting provider	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services; Personal Information contained in application logged requests	USA	Google Privacy Terms & Security Measures
Hotjar, Inc.	DrugBank Website	Customer service and support	Personal Information contained in text or files created by customer (E.g. feedback forms)	USA	Security at Hotjar
HubSpot, Inc.	DrugBank Website and Clinical API	Customer service and support	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	HubSpot Security Program
K15t GmbH	Support Center	Customer service and support	Personal Information contained in support center search and page views	Germany	K15t Trust Center
Mailgun Technologies, Inc.	DrugBank	Communications technology provider for product notifications	Personal Information contained in product notice communications	USA, EEA	Mailgun’s Commitment to Security and Compliance
Metabase, Inc.	All DrugBank Products	Infrastructure provider to enable customer data querying, and analytics	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Metabase Security Overview (We Don’t Want Your Data)
Slack Technologies, LLC	All Applicable Services	Customer service and support	Personal Information contained in user account information and text or files created by customer and stored in Applicable Services	USA	Security at Slack
Statsig, Inc.	Product Analytics, Feature Flagging, A/B Testing, Event Collection	Enabling feature management and product optimization	Unique User ID and event parameters	USA	Security at Statsig
Stripe, Inc.	Clinical API	Payment processing	Personal Information contained in user account information (limited to company name and email, we do not store payment information)	USA	Security at Stripe
TrafficCake, Ltd.	All DrugBank Products	Application monitoring and incident notifications	Personal Information contained in product notice communications	UK	Terms of Service
WorkOS, Inc.	DrugBank Website	Account authentication and Single Sign-On	Personal Information contained in user account information, limited to email address and name.	USA	WorkOS Security Overview
ZoomInfo Technologies, LLC	All DrugBank Products	Customer service and support	Personal Information contained in text or files created by customer	USA	ZoomInfo Trust Center

DrugBank is committed to ensuring that all of its sub-processors have the appropriate legal and security safeguards in place to ensure that your data will remain protected to the highest standards. This includes signing a Data Processing Agreement (together with Standard Contractual Clauses, where applicable) with all of our sub-processors and ensuring they all have supplementary measures in place, where applicable.

Updates to this page

Due to the nature of our business and the volume of users, our business needs and services providers may change from time to time. For example, we may deprecate a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Services.

We will periodically update this page to reflect additions and removals to our list of service providers. Please check back frequently for updates.

LAST UPDATED: 2025-12-24